Shape Bandwidth
Limit upload or download throughput for matched public requests without rejecting them.
Use This When
Use traffic shaping for large uploads, public file downloads, or protecting small upstreams from bandwidth-heavy clients.
Prerequisites
- A host/path/method match that isolates the traffic to slow.
- A byte-per-second budget for upload, download, or both.
Steps
Open Traffic Policy -> Traffic Shapers and create a rule.

The Cache and Traffic Shapers sections sit together because both act after early deny policies and before or during route target forwarding. Match the traffic. Example for a downloads path:
Field Value Name downloads-shaperPriority 20Enabled On Protocols HTTPS Host patterns files.example.comPath prefixes /downloadChoose budget scope:
Scope Use when Per key All requests for the same key should share one budget. Per request Every request should get an independent budget. For public downloads, use per key and key by remote IP. For one-off large imports, per request may be simpler.
Set byte rates:
Field Value Download bytes per second 1048576Upload bytes per second 0Burst bytes 2097152Request exempt bytes 0Response exempt bytes 655360means unlimited for upload or download rates.Burst bytes
Burst allows a connection to temporarily exceed the configured byte-per-second rate by up to this many bytes before the token bucket enforces the limit. Use it to absorb the initial burst of a download without throttling the entire transfer from byte one. Set to
0to disable burst.

Verification
Download a large matching file and watch transfer speed. Use Traffic tracing to confirm the shaper rule is selected.
Troubleshooting
| Symptom | Check |
|---|---|
| Small responses appear unshaped | They may finish inside exempt bytes or before the rate is visible. |
| Clients share bandwidth unexpectedly | Review key parts and budget scope. |
| Rule does not match | Confirm host, path, protocol, method, and priority. |